$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa File: 3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: fn56Qj6vEThCZw4ZYsC5L2JfFLStIIceEiglEiwrmiw= Subject key identifier: 25:48:01:13:05:1C:CB:49:73:91:94:60:A7:61:D0:E4:0A:2D:11:27 Certificate issuer: /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0 Certificate serial: 6FE723551913F697DB68BD3F99FFB075CF25CEBC Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa Signing time: Sun 03 May 2026 02:39:43 +0000 ROA not before: Sun 03 May 2026 02:34:43 +0000 ROA not after: Sun 02 May 2027 02:39:43 +0000 asID: 45298 IP address blocks: 103.247.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e7:23:55:19:13:f6:97:db:68:bd:3f:99:ff:b0:75:cf:25:ce:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0 Validity Not Before: May 3 02:34:43 2026 GMT Not After : May 2 02:39:43 2027 GMT Subject: CN=25480113051CCB4973919460A761D0E40A2D1127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:47:bc:c9:1d:8b:69:3f:66:42:6b:34:17: cc:e8:61:c3:c5:08:81:2c:99:9a:a8:9e:55:20:1c: 58:3f:35:6b:01:2c:85:f4:25:14:be:ac:10:d9:4a: 97:d5:cf:83:c8:bb:0e:2d:0e:92:9b:cc:c1:d3:3b: 87:22:8a:c7:4d:df:d7:f6:ee:35:fd:55:b6:65:7f: 19:bb:85:86:18:2c:58:7a:db:c7:7b:e8:a2:43:7a: 3d:28:c2:a2:5a:04:dd:35:0b:96:0e:8d:78:81:6c: 64:2f:14:4a:25:a8:71:31:37:a4:ef:55:e1:20:94: 39:3f:60:95:36:3a:fa:17:33:05:d3:5d:50:f9:17: 22:83:01:f4:15:24:b0:4b:99:fe:d3:26:24:8a:0a: b0:5f:d3:86:4f:92:4c:b4:b9:f9:9f:6a:37:d6:a4: ae:e9:3a:94:fe:99:84:44:d0:b9:52:fb:18:15:93: da:6e:55:bf:5b:9d:85:41:d9:58:a3:72:14:75:30: e2:65:35:e7:b4:4e:fa:db:f7:91:df:c1:ae:cd:d3: f8:e3:92:1a:81:fe:28:99:ab:5c:8d:23:e5:19:40: 3d:8e:92:92:7e:7f:fe:71:fb:2b:ae:08:93:a6:56: ea:91:ae:fe:2f:a4:1a:7c:94:88:74:01:45:bc:c8: 4a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:48:01:13:05:1C:CB:49:73:91:94:60:A7:61:D0:E4:0A:2D:11:27 X509v3 Authority Key Identifier: keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.245.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:ed:fd:8a:37:d9:bf:dd:c0:8e:5e:af:49:02:98:b2:88:f8: c1:4a:a3:7a:d1:7e:bc:f5:75:0f:a5:b0:58:98:6c:a2:fb:92: 74:1c:e2:05:f9:bb:f3:35:31:98:4d:47:35:19:de:b1:22:ca: 94:1c:bc:7f:28:43:d0:cb:f4:7a:25:68:d2:d2:94:b5:e4:75: 3c:fd:77:c9:7c:b8:db:df:07:88:88:be:53:56:ee:54:12:2a: c9:f8:bd:11:81:f3:9c:d1:b9:10:a3:7b:6d:c8:44:20:2b:ed: ba:e9:60:31:48:12:9f:20:82:5a:85:d7:7b:48:2c:01:bb:2b: bd:21:15:09:49:5e:77:fc:9e:25:8d:a1:5f:b9:1f:e5:e3:ec: 6e:3e:26:62:5f:0f:7b:cd:59:e2:cd:33:8d:78:d6:03:c1:8b: 83:74:07:40:f2:2a:04:75:c7:11:b0:3a:df:47:00:90:5a:ab: 5b:f4:d2:12:21:59:75:f2:cd:22:23:25:f2:27:58:e1:9d:d2: 12:99:30:8b:6b:18:fd:e9:f0:22:86:a1:f4:39:e8:f5:d3:00: e1:6c:99:6c:71:a9:b2:28:64:64:dd:06:6c:7d:75:aa:08:a5: c6:fe:3c:c7:75:22:75:8a:10:1c:88:87:fb:52:77:d3:82:25: cb:4a:5c:45 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUb+cjVRkT9pfbaL0/mf+wdc8lzrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0RUFFNkRGN0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NG MjcwRjdBMDAeFw0yNjA1MDMwMjM0NDNaFw0yNzA1MDIwMjM5NDNaMDMxMTAvBgNV BAMTKDI1NDgwMTEzMDUxQ0NCNDk3MzkxOTQ2MEE3NjFEMEU0MEEyRDExMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFUe8yR2LaT9mQms0F8zoYcPF CIEsmZqonlUgHFg/NWsBLIX0JRS+rBDZSpfVz4PIuw4tDpKbzMHTO4ciisdN39f2 7jX9VbZlfxm7hYYYLFh628d76KJDej0owqJaBN01C5YOjXiBbGQvFEolqHExN6Tv VeEglDk/YJU2OvoXMwXTXVD5FyKDAfQVJLBLmf7TJiSKCrBf04ZPkky0ufmfajfW pK7pOpT+mYRE0LlS+xgVk9puVb9bnYVB2VijchR1MOJlNee0Tvrb95Hfwa7N0/jj khqB/iiZq1yNI+UZQD2OkpJ+f/5x+yuuCJOmVuqRrv4vpBp8lIh0AUW8yEqDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJUgBEwUcy0lzkZRgp2HQ5AotEScwHwYDVR0j BBgwFoAUSk6ubffr+NW0QE265IdIzPJw96AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVlYzI1ZTQtOWFhOC00YmVmLTkwOTctYzBiZWMwYjI2NmE3LzAvNEE0RUFFNkRG N0VCRjhENUI0NDA0REJBRTQ4NzQ4Q0NGMjcwRjdBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QTRFQUU2REY3RUJGOEQ1QjQ0MDREQkFFNDg3NDhDQ0YyNzBG N0EwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMxMzAzMzJlMzIzNDM3MmUzMjM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzIzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/f1MA0GCSqG SIb3DQEBCwUAA4IBAQB97f2KN9m/3cCOXq9JApiyiPjBSqN60X689XUPpbBYmGyi +5J0HOIF+bvzNTGYTUc1Gd6xIsqUHLx/KEPQy/R6JWjS0pS15HU8/XfJfLjb3weI iL5TVu5UEirJ+L0RgfOc0bkQo3ttyEQgK+266WAxSBKfIIJahdd7SCwBuyu9IRUJ SV53/J4ljaFfuR/l4+xuPiZiXw97zVnizTONeNYDwYuDdAdA8ioEdccRsDrfRwCQ Wqtb9NISIVl18s0iIyXyJ1jhndISmTCLaxj96fAihqH0Oej10wDhbJlscamyKGRk 3QZsfXWqCKXG/jzHdSJ1ihAciIf7UnfTgiXLSlxF -----END CERTIFICATE-----Generated at Wed May 13 09:08:28 2026 by rpki-client